$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcceddf3-bd72-422c-8161-45788b77bd92.roa File: dcceddf3-bd72-422c-8161-45788b77bd92.roa (raw, json) Hash identifier: lIc21IyJRNjgt6JlT1hmGquOm4ZfdhIHz9yy1XRphds= Subject key identifier: 40:5E:C8:F2:E6:B4:EB:3E:6D:7E:9F:A5:44:92:6E:91:6B:5D:5A:25 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7908D06FC08D0BB7261B75196CDE39BBD325BE09 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcceddf3-bd72-422c-8161-45788b77bd92.roa Signing time: Fri 06 Jun 2025 00:50:10 +0000 ROA not before: Fri 06 Jun 2025 00:50:10 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:08:d0:6f:c0:8d:0b:b7:26:1b:75:19:6c:de:39:bb:d3:25:be:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 6 00:50:10 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=9820aaf462cae3d93c06686cf66ed050abed190c85ee3d163bf3db49539aaf75, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:1c:71:8e:c3:5e:c7:14:a3:13:77:83:a9: b2:5f:9c:f1:f9:31:31:1f:59:7c:dc:20:41:33:f9: 0d:49:dd:ec:b8:b6:b1:97:14:4c:91:47:7d:1e:9c: 48:2d:04:5a:e3:52:0b:db:7c:b6:1a:3b:25:8f:7d: e4:54:0c:5a:01:64:6b:ec:86:d1:6d:7d:b0:da:cb: 16:e4:ed:23:29:61:52:05:dc:b0:e0:f2:a7:31:38: ae:e0:82:e9:b4:1f:67:c4:2d:4d:cc:2e:4f:b8:0b: ec:d1:14:45:48:59:bf:68:02:aa:7d:51:c3:8f:ac: 0a:af:43:6d:06:28:1a:d3:d7:76:17:a2:0a:7f:89: c3:84:dc:4b:a0:10:e1:70:41:6b:fd:cc:80:d4:1b: ba:d2:5f:1c:f8:4e:03:ee:e3:54:b4:ce:fd:06:ce: bb:fc:90:e6:58:99:f4:99:5a:99:3f:da:11:68:5c: a7:7a:f9:37:21:d2:83:4f:e7:24:a0:d4:15:ed:ac: 96:e1:6a:24:b0:b7:f7:83:cf:bf:c1:31:e3:04:88: 41:71:90:12:25:61:1e:c4:0b:a9:4c:ce:8f:ec:bb: da:35:5b:e9:d9:da:e7:3d:2b:cd:5b:e7:f8:dd:5c: 09:bb:a6:2e:47:51:c9:dc:78:71:22:10:d4:5c:e4: 81:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5E:C8:F2:E6:B4:EB:3E:6D:7E:9F:A5:44:92:6E:91:6B:5D:5A:25 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcceddf3-bd72-422c-8161-45788b77bd92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.185.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:47:f9:ee:0a:24:86:c7:39:25:31:fe:24:30:03:b1:9f:ce: b3:6d:a6:96:2b:ea:d3:83:2f:42:e9:76:27:af:28:22:dc:03: 2d:ec:34:0e:f5:21:0e:06:e0:29:d7:f4:5a:d3:98:ac:ca:2f: 15:9c:3e:06:fa:6b:75:5d:48:34:3c:e4:4f:4f:62:9d:a6:66: 3c:67:b8:2f:77:72:1c:84:b5:5a:9d:d1:aa:30:f1:2b:43:1b: 73:d5:33:55:63:35:74:f9:75:93:cd:69:91:48:b4:fb:23:4c: 9b:e6:a6:b6:c5:7f:fa:85:24:c5:29:b2:8a:88:c2:2b:dd:0e: 1a:ef:92:00:48:93:5e:35:18:63:bf:40:91:6e:4c:21:a1:7a: f1:93:91:59:8c:43:c4:13:b5:0c:d3:ce:80:c6:de:07:db:71: 70:40:98:51:6c:33:11:ec:92:20:90:9e:3f:c6:03:97:c5:98: 4f:e3:91:67:24:36:8e:25:aa:f4:55:48:c8:c5:26:2d:77:e2: 7b:eb:80:09:ca:1f:20:ed:1b:60:44:a6:ed:44:e9:9a:9e:a2: d6:af:4d:bd:80:57:aa:69:79:e3:34:13:d9:50:bc:cd:f5:81: 5e:69:50:6e:ab:75:6c:30:02:49:46:8b:b6:01:6d:e5:b6:37: 5d:52:e9:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeQjQb8CNC7cmG3UZbN45u9MlvgkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA2MDA1MDEwWhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODIwYWFmNDYyY2FlM2Q5M2MwNjY4NmNmNjZlZDA1MGFi ZWQxOTBjODVlZTNkMTYzYmYzZGI0OTUzOWFhZjc1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLTBxxjsNexxSjE3eDqbJfnPH5MTEfWXzcIEEz+Q1J3ey4 trGXFEyRR30enEgtBFrjUgvbfLYaOyWPfeRUDFoBZGvshtFtfbDayxbk7SMpYVIF 3LDg8qcxOK7ggum0H2fELU3MLk+4C+zRFEVIWb9oAqp9UcOPrAqvQ20GKBrT13YX ogp/icOE3EugEOFwQWv9zIDUG7rSXxz4TgPu41S0zv0Gzrv8kOZYmfSZWpk/2hFo XKd6+Tch0oNP5ySg1BXtrJbhaiSwt/eDz7/BMeMEiEFxkBIlYR7EC6lMzo/su9o1 W+nZ2uc9K81b5/jdXAm7pi5HUcnceHEiENRc5IEBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQF7I8ua06z5tfp+lRJJukWtdWiUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RjY2VkZGYzLWJkNzItNDIyYy04MTYxLTQ1Nzg4Yjc3YmQ5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0LrkwDQYJKoZIhvcNAQELBQADggEBADxH+e4KJIbHOSUx/iQwA7GfzrNt ppYr6tODL0LpdievKCLcAy3sNA71IQ4G4CnX9FrTmKzKLxWcPgb6a3VdSDQ85E9P Yp2mZjxnuC93chyEtVqd0aow8StDG3PVM1VjNXT5dZPNaZFItPsjTJvmprbFf/qF JMUpsoqIwivdDhrvkgBIk141GGO/QJFuTCGhevGTkVmMQ8QTtQzTzoDG3gfbcXBA mFFsMxHskiCQnj/GA5fFmE/jkWckNo4lqvRVSMjFJi134nvrgAnKHyDtG2BEpu1E 6ZqeotavTb2AV6ppeeM0E9lQvM31gV5pUG6rdWwwAklGi7YBbeW2N11S6XM= -----END CERTIFICATE-----Generated at Sat Jun 14 05:57:58 2025 by rpki-client